CN116248479A - Network path detection method, device, equipment and storage medium - Google Patents
Network path detection method, device, equipment and storage medium Download PDFInfo
- Publication number
- CN116248479A CN116248479A CN202211712266.XA CN202211712266A CN116248479A CN 116248479 A CN116248479 A CN 116248479A CN 202211712266 A CN202211712266 A CN 202211712266A CN 116248479 A CN116248479 A CN 116248479A
- Authority
- CN
- China
- Prior art keywords
- flow
- network
- message
- alarm
- information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/12—Discovery or management of network topologies
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/12—Network monitoring probes
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
- Y02D30/00—Reducing energy consumption in communication networks
- Y02D30/50—Reducing energy consumption in communication networks in wire-line communication networks, e.g. low power modes or reduced link rate
Abstract
The embodiment of the invention provides a network path detection method, a device, equipment and a storage medium, which comprise the following steps: searching network equipment and port information according to the pre-recorded network topology information, issuing a pre-configured flow detection rule to the network equipment, expanding an IPoption field of a message based on the flow detection rule, detecting a flow path, acquiring the network equipment and port information through which the message flows, generating a flow path topology map corresponding to the flow detection rule, determining a flow path restoration result, and matching a preset alarm rule according to the flow path restoration result to carry out fault alarm. According to the invention, by expanding the IPoption field, the flow path detection of different tenants in the public cloud can be simultaneously carried out, the flow path topology information is generated to monitor the tenant service in real time based on the flow detection rules of the multiple groups, the alarm is triggered when the flow interruption fault exists, the fault problem is determined in time, and the user experience is improved.
Description
Technical Field
The present invention relates to the field of network communications technologies, and in particular, to a network path detection method, apparatus, device, and storage medium.
Background
Along with the continuous development of cloud computing technology, cloud service application scenes are more and more abundant, as a cloud network which is an important support for cloud computing development, how to timely discover problems through flow detection and accurately locate the problems are very important, and the cloud network flow detection plays a key role in improving user experience, and is used for monitoring data flows, including data output speed, data input speed and total flow, so that network flow detection is used for managing and controlling network communication data packets essentially.
At present, a common flow path detection mode comprises a hardware probe, flow mirror protocol analysis based, SNMP based flow monitoring technology and the like, however, aiming at the characteristics that a public cloud resource pool bears more tenants and more forwarding nodes and a plurality of different forwarding devices are involved, special network flow hardware devices are required to be connected in series for network flow detection by adopting the hardware probe, the construction cost of cloud resources Chi Xin is increased, and the whole network flow monitoring cannot be realized; the flow mirror image protocol analysis method is only aimed at a single link, and the requirement of the whole network flow monitoring cannot be met; based on the fact that the SNMP-based traffic monitoring can only collect traffic information of some devices and ports and cannot meet the requirements of real-time monitoring of service traffic paths of different tenants on a cloud network, as a cloud operator cannot find network path faults in advance, the user needs to wait until a customer reports a fault and then check the problems one by one according to the service of the customer, and user experience is affected.
Disclosure of Invention
An embodiment of the present invention provides a network path detection method, device, equipment and storage medium, which solve the problem that the prior art cannot meet the requirements of real-time monitoring of service traffic paths of different tenants on a cloud network, so as to realize the effect of real-time path detection of the cloud network and quickly and accurately locate network faults of different tenants, and specifically adopts the following technical scheme:
in a first aspect of the present invention, there is provided a network path detection method, the method including:
searching network equipment and port information according to pre-entered network topology information, and issuing a pre-configured flow detection rule to the network equipment;
based on the flow detection rule, expanding an IP option field of the message to detect a flow path;
acquiring network equipment and port information through which the message flows, generating a flow path topological graph corresponding to the flow detection rule, and determining a flow path restoration result;
and according to the flow path restoration result, matching a preset alarm rule to carry out fault alarm.
Optionally, the searching for network equipment and port information according to the pre-entered network topology information and issuing a pre-configured flow detection rule to the network equipment includes:
According to the network equipment of the network topology information, matching multiple group information, and determining a source port and a destination port through which the flow flows, wherein the multiple group information comprises a source IP, a destination IP, a source port and a destination port;
configuring the flow detection rule for each tenant in the public cloud according to a source port and a destination port through which the flow flows;
and issuing the flow detection rule to the network equipment through a network configuration protocol or a network security protocol.
Optionally, the expanding the IP option field of the packet based on the flow detection rule, performing flow path detection includes:
adding each tenant VIN, the ID of the flow detection rule and the message serial number SN in the public cloud in the IP option field of the message;
and determining the network equipment configured with the flow marks according to the expanded message, and detecting the flow paths of the network equipment configured with the flow marks in parallel.
Optionally, the determining, according to the extended message, the network device configured with the traffic label, and detecting the traffic path of the network device configured with the traffic label in parallel, includes:
according to the expanded message, carrying out flow marking on east-west flow and north-south flow, and determining network equipment configured with the flow marking;
The traffic marking points of the northeast traffic comprise access points of cloud entering messages and client virtual machine points, and the traffic marking points of the northeast traffic comprise special line access ports and virtual interaction software corresponding to a cloud host.
Optionally, after determining the network device configured with the traffic sign according to the extended message and performing the traffic path detection on the network device configured with the traffic sign in parallel, the method further includes:
recording a message sequence number SN of the message, and determining whether packet loss exists;
under the condition of no packet loss, counting the current processed message according to the sequence number difference value of the current processed message and the last received message, and storing the current processed message as flow statistical information;
and if the counted message serial number SN reaches a preset threshold value, storing the message serial number SN as historical flow statistic information.
Optionally, the obtaining the network device and port information through which the packet flows, generating a traffic path topology map corresponding to the traffic detection rule, and determining a traffic path restoration result includes:
determining a message flow path according to flow statistical information corresponding to each flow detection rule obtained periodically;
determining initial network equipment information through which the message flows according to the message flow path;
And based on the connection relation between the network equipment and the ports, associating the intermediate equipment information of the message flow paths, and generating a flow path topological graph corresponding to each flow detection rule.
Optionally, the obtaining the network device and port information through which the packet flows, generating a traffic path topology map corresponding to the traffic detection rule, and determining a traffic path restoration result includes:
acquiring flow statistical information of network equipment and ports through which the messages flow, wherein the flow statistical information comprises the number of messages received by the network equipment and the ports;
and generating message forwarding conditions of network equipment and ports in a preset time period according to the flow statistical information, and determining a flow path restoration result.
Optionally, the performing fault warning by matching with a preset warning rule according to the flow path restoration result includes:
inquiring flow statistical information of the flow path according to the flow path restoration result;
according to the flow statistical information of the flow path, matching a preset alarm rule;
under the condition of matching the preset alarm rule, determining an alarm type, wherein the alarm type comprises generating an alarm and recovering the alarm;
If the alarm type is determined to be the generated alarm, triggering alarm reporting to perform fault alarm;
and if the alarm type is determined to be the recovery alarm, inquiring an alarm report list, and sending alarm information to perform fault alarm.
In a second aspect of the present invention, there is also provided a network path detection apparatus, the apparatus comprising:
the network topology information module is used for searching network equipment and port information according to the pre-recorded network topology information and transmitting a pre-configured flow detection rule to the network equipment;
the flow path detection module is used for expanding the IP option field of the message based on the flow detection rule and carrying out flow path detection;
the flow path restoration module is used for acquiring the network equipment and port information through which the message flows, generating a flow path topological graph corresponding to the flow detection rule, and determining a flow path restoration result;
and the fault alarm module is used for carrying out fault alarm by matching with a preset alarm rule according to the flow path restoration result.
Optionally, the network topology information module includes:
the matching information sub-module is used for matching multi-group information according to the network equipment of the network topology information, and determining a source port and a destination port through which the flow flows, wherein the multi-group information comprises a source IP, a destination IP, a source port and a destination port;
The configuration rule submodule is used for configuring the flow detection rule for each tenant in the public cloud according to the source port and the destination port through which the flow flows;
and the sending rule submodule is used for sending the flow detection rule to the network equipment through a network configuration protocol or a network security protocol.
Optionally, the flow path detection module includes:
a message processing sub-module, configured to add each tenant VIN in the public cloud, an ID of the flow detection rule, and a message sequence number SN in an IP option field of the message;
and the detection path submodule is used for determining the network equipment configured with the flow marks according to the expanded message and carrying out flow path detection on the network equipment configured with the flow marks in parallel.
Optionally, the detection path submodule includes:
the flow marking unit is used for marking the east-west flow and the north-south flow according to the expanded message and determining network equipment for configuring the flow marking;
the traffic marking points of the northeast traffic comprise access points of cloud entering messages and client virtual machine points, and the traffic marking points of the northeast traffic comprise special line access ports and virtual interaction software corresponding to a cloud host.
Optionally, the flow path detection module further includes:
a recording message sub-module for recording the message serial number SN of the message and determining whether the packet loss exists;
the first storage sub-module is used for counting the current processed message according to the sequence number difference value of the current processed message and the last received message under the condition of no packet loss and storing the current processed message as flow statistical information;
and the second storage sub-module is used for storing the message sequence number SN as historical flow statistical information if the counted message sequence number SN reaches a preset threshold value.
Optionally, the flow path restoration module includes:
the determining path submodule is used for determining a message flow path according to the flow statistical information corresponding to each flow detection rule acquired periodically;
the determining information sub-module is used for determining the information of the initial network equipment through which the message flows according to the message flow path;
and the generation sub-module is used for generating a flow path topological graph corresponding to each flow detection rule based on the connection relation between the network equipment and the ports and the intermediate equipment information of the message flow path.
Optionally, the flow path restoration module includes:
The information acquisition sub-module is used for acquiring flow statistical information of the network equipment and the ports through which the messages flow, wherein the flow statistical information comprises the number of the messages received by the network equipment and the ports;
and the determination result submodule is used for generating message forwarding conditions of network equipment and ports in a preset time period according to the flow statistical information and determining a flow path restoration result.
Optionally, the fault alarm module includes:
the query information sub-module is used for querying flow statistical information of the flow path according to the flow path restoration result;
the matching alarm sub-module is used for matching a preset alarm rule according to the flow statistical information of the flow path;
the alarm determining sub-module is used for determining an alarm type under the condition of matching the preset alarm rule, wherein the alarm type comprises generating an alarm and recovering the alarm;
the first alarm sub-module is used for triggering alarm reporting to perform fault alarm if the alarm type is determined to be the generated alarm;
and the second alarm sub-module is used for inquiring an alarm report list and sending alarm information to carry out fault alarm if the alarm type is determined to be the recovery alarm.
In a third aspect of the present invention, there is also provided a communication device comprising: a transceiver, a memory, a processor, and a program stored on the memory and executable on the processor;
the processor is configured to read a program in the memory to implement the network path detection method according to any one of the first aspect;
in a fourth aspect of the present invention, there is also provided a computer readable storage medium having instructions stored therein which, when run on a computer, cause the computer to perform the network path detection method of any one of the first aspects described above.
According to the network path detection method provided by the embodiment of the invention, network equipment and port information are searched according to the network topology information which is input in advance, a pre-configured flow detection rule is issued to the network equipment, based on the flow detection rule, an IP option field of a message is expanded, flow path detection is performed, the network equipment and port information through which the message flows are obtained, a flow path topological diagram corresponding to the flow detection rule is generated, a flow path restoration result is determined, and fault alarm is performed by matching with a preset alarm rule according to the flow path restoration result. According to the invention, by expanding the IP option field, the flow path detection of different tenants in the public cloud can be simultaneously carried out, the flow path topology information is generated to monitor the tenant service in real time based on the flow detection rules of the multiple groups, and the hardware probe equipment is not required to be newly added, so that the cost is reduced, the alarm is triggered when the flow is interrupted and the fault problem is timely determined, and the user experience is improved.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below.
Fig. 1 is a flowchart of steps of a network path detection method according to an embodiment of the present invention;
fig. 2 is a flowchart of a method of step 101 of the network path detection method provided in the embodiment of the present invention in fig. 1;
FIG. 3 is a flowchart of a method of step 102 of the network path probing method provided in the embodiment of the present invention in FIG. 1;
fig. 4 is a flowchart of a method of step 103 of the network path detection method provided in the embodiment of the present invention in fig. 1;
FIG. 5 is a flowchart of a method of step 104 of the network path probing method provided in the embodiment of the present invention in FIG. 1;
fig. 6 is a schematic diagram of an application scenario of a network path detection method according to an embodiment of the present invention;
fig. 7 is a schematic diagram of a packet in the method for detecting a network path according to the embodiment of the present application shown in fig. 1;
fig. 8 is a schematic structural diagram of a network path detecting device according to an embodiment of the present invention;
fig. 9 is a schematic structural diagram of a communication device according to an embodiment of the present invention.
Detailed Description
For the purpose of making the objects, technical solutions and advantages of the embodiments of the present invention more apparent, the following detailed description of the embodiments of the present invention will be given with reference to the accompanying drawings. However, those of ordinary skill in the art will understand that in various embodiments of the present invention, numerous technical details have been set forth in order to provide a better understanding of the present application. However, the technical solutions claimed in the present application can be implemented without these technical details and with various changes and modifications based on the following embodiments. The following embodiments are divided for convenience of description, and should not be construed as limiting the specific implementation of the present invention, and the embodiments can be mutually combined and referred to without contradiction.
Referring to fig. 1, a step flowchart of a network path detection method provided by an embodiment of the present invention is shown, where the method may include:
In the embodiment of the present application, based on the characteristics of multi-tenant, overlay and underlay coordination, control plane and service plane separation of the cloud network, in order to implement flow path detection of each tenant in the whole network in the cloud network resource pool, to quickly locate a cloud network fault, in this embodiment, a user may add a preconfigured flow detection rule through a management platform according to a service requirement, and the management platform searches network equipment and port information according to network topology information corresponding to each network equipment that is recorded in advance, and issues the preconfigured flow detection rule to the network equipment.
It should be noted that, in this embodiment, the management platform establishes a communication connection with the SDN control system, the management platform is a comprehensive software suite with an integration tool, and is used to monitor and control cloud computing resources, the management platform is deployed into an existing cloud environment as a Virtual Machine (VM) composed of a database and a server, the server communicates with an application programming interface to connect the database and virtual resources stored in the cloud, the database collects information about how the virtual infrastructure operates, and sends an analysis result to a display interface, where an operator can analyze cloud performance. An SDN controller is an application in a software defined network (Software Defined Network, SDN) that is mainly controlled by a centralized controller in a unified manner in an overlay network, and is responsible for flow control to ensure an intelligent network.
For example: as shown in the flow detection scenario schematic diagram in fig. 6, there are many tenants in the cloud computing network, and the management platform analyzes and implements the public cloud network detection function by performing flow marking and collecting flow statistics information on each network device and port. Specifically, the management platform searches for a corresponding computing node according to the cloud host information, searches for physical equipment and ports through which corresponding traffic flows according to the recorded network topology information, generates a corresponding traffic detection rule, and transmits the corresponding traffic detection rule to the corresponding equipment.
In this embodiment, the management and control platform automatically configures the flow detection rule according to the entered network topology, and issues the pre-configured flow detection rule to the network device, so that the operation is simple, and the configuration flow is simplified.
It should be noted that some link probing methods commonly used in the prior art include: the ping and trace are generally manually triggered by operation and maintenance, and cannot realize real-time tenant flow path detection, so that the invention can realize real-time service flow path detection based on the flow detection rule, expands the IP option field and keeps the network topology of the existing resource pool unchanged.
Specifically, referring to the message information shown in fig. 7, wherein the Type is used for copying into all fragments, length represents the total Length of the IP option, the unit is bytes, the Length of the IP option field is set to 0-31, and rule ID represents the ID of the configured flow detection rule; it should be noted that, the VNIs are VxLAN ids corresponding to tenants, and in the same public cloud resource pool, the VNIs of each tenant are different, so as to distinguish flow statistics of different tenants, and each tenant can configure 65536 flow detection rules at maximum; the Sequence number is a message Sequence number SN, for different Rule ID marked messages, the message Sequence number SN is increased by 1, and when the counted message Sequence number SN is increased to a preset threshold value 0xFFFFFFFF, the counted message Sequence number SN is rolled back to an initial value 0x00000000 for counting again.
In this embodiment, based on the flow detection rule, the IP option field of the message is extended, by adding the VNI of the tenant to the message, the configuration of the flow statistics rule can be greatly simplified, the ID of the added flow detection rule can support the concurrent flow path detection requirements of multiple services of different tenants, and the added message sequence number SN can be used to support the situation of packet loss statistics.
Further, according to the expanded message, traffic marking is carried out on east-west traffic and north-south traffic, and network equipment for configuring the traffic marking is determined; the traffic marking points of east-west traffic comprise access points of cloud entering messages and client virtual machine points, and the traffic marking points of north-south traffic comprise special line access ports and virtual interaction software corresponding to a cloud host.
In this embodiment, the message is mainly detected for southwest traffic and northeast traffic, where southwest traffic is traffic interacted between servers inside the data center, and northeast traffic is traffic interacted between users outside the data center and servers inside the data center. Marking the east-west traffic by traffic marking points at the access point of the cloud entering message and the client virtual machine point; the flow mark points of the north-south flow are a bleaf inlet port, a private line access POP inlet port, virtual interaction software corresponding to the cloud host and the like. Because the cloud internal network has the encapsulation of the vxlan, the vxlan encapsulation can be started, the value of the inner layer IP OPTION is copied to the outer layer message header of the vxlan, the difficulty of flow statistics is greatly simplified, and the message forwarding efficiency is improved.
It should be noted that, in the embodiment of the present application, the management platform obtains the network device and the port information through which the message flows, outputs the topology information of the message from the detection node to the target IP according to the flow detection rule, completes the flow detection from the detection node to the target IP, generates the flow path topology map corresponding to the flow detection rule, and can determine the flow path restoration result according to the flow path topology map.
Specifically, the management and control platform analyzes the flow forwarding path according to the flow statistical information corresponding to each detection rule, extracts network equipment and port information through which a message flows, finds out initial equipment information, and finally associates intermediate equipment information according to the connection relation between different ports of the equipment, and complements if the intermediate equipment information is incomplete; and generating a flow path topological graph corresponding to each flow detection rule, aggregating flow statistics for the cluster or the main and standby forwarding nodes, displaying the number of messages received by each forwarding node through the flow path topological graph, and restoring the flow forwarding condition in the short period of time to determine a flow path restoring result.
And 104, matching a preset alarm rule to carry out fault alarm according to the flow path restoration result.
It should be noted that, in this embodiment, according to the flow path restoration result, the flow statistics information of the flow path is queried, and according to the flow statistics information of the flow path, a preset alarm rule is matched; the cloud host warning rules are set, and a user self-defines a monitoring target and a notification strategy so as to know the running condition of the cloud network in time, thereby playing a role in early warning. The determination manner of the preset alarm rule in this embodiment is not particularly limited.
Specifically, under the condition of matching with a preset alarm rule, the alarm type is determined, wherein the alarm type comprises alarm generation and recovery alarm, if the alarm type is determined to be the alarm generation, alarm reporting is triggered to perform fault alarm, if the alarm type is determined to be the recovery alarm, an alarm reporting list is queried, and alarm information is sent to perform fault alarm. It should be noted that, when the flow statistics information shows that the message data is interrupted or lost, an alarm is generated; and when the flow path detection is successful, reporting a recovery alarm. The management platform matches the alarm rules according to the flow path restoration result, judges whether to carry out alarm or restore alarm according to the matching result, inquires the corresponding alarm notification group and notifies the relevant party, and continuously notifies the relevant party of the deadly alarm until the alarm is restored.
In this embodiment, through the flow statistics information of each device in the whole resource pool network, the actual flow path is analyzed, the network fault is rapidly located, and the operation and maintenance personnel can visually find the problem through the flow path displayed by the management platform in a patterning manner.
According to the network path detection method provided by the embodiment of the invention, network equipment and port information are searched according to the network topology information which is input in advance, a pre-configured flow detection rule is issued to the network equipment, based on the flow detection rule, an IP option field of a message is expanded, flow path detection is performed, the network equipment and port information through which the message flows are obtained, a flow path topological diagram corresponding to the flow detection rule is generated, a flow path restoration result is determined, and fault alarm is performed by matching with a preset alarm rule according to the flow path restoration result. According to the invention, by expanding the IP option field, the flow path detection of different tenants in the public cloud can be simultaneously carried out, the flow path topology information is generated to monitor the tenant service in real time based on the flow detection rules of the multiple groups, and the hardware probe equipment is not required to be newly added, so that the cost is reduced, the alarm is triggered when the flow is interrupted and the fault problem is timely determined, and the user experience is improved.
Further, referring to fig. 2, fig. 2 is a flowchart of a method of step 101 of the network path detection method provided in the embodiment of the present invention in fig. 1, where step 101 includes:
in step 1013, the traffic detection rule is issued to the network device by a network configuration protocol or a network security protocol.
In the above steps 1011-1013, when the network device and the server establish a TCP connection, a unique TCP connection is determined through a quadruple, and according to the network device of the network topology information, the network device matches the multiple group information to determine the source port and the destination port through which the traffic flows, and in this embodiment, the quadruple information includes the source IP, the destination IP, the source port, and the destination port, and according to the source port and the destination port through which the traffic flows, the traffic detection rule is configured for each tenant in the public cloud, and the traffic detection rule is issued to the network device through the network configuration protocol or the network security protocol.
The user can add a flow detection rule according to service requirements through a management and control platform, match a quadruple to select a cloud host and a service to be detected, set a detection time period, detect the number of packets and the like, and the management platform is communicated with an SDN control system and searches corresponding computing nodes in real time according to VPCID and cloud host information; according to the recorded network topology information, the physical equipment and the port through which the corresponding flow flows are searched, the corresponding flow detection rule and the corresponding flow statistics rule are generated, and the flow detection rule and the flow statistics rule are issued to the corresponding equipment in a netconf or SSH mode.
It should be noted that, the network configuration protocol (Network ConfigurationProtocol) provides a set of protocols for communication between the management platform and the network device, and issues and modifies the configuration of the remote device, where SSH (Secure Shell) is a network security protocol, and implements services such as Secure access and file transmission through an encryption and authentication mechanism.
Compared with the prior art, the network path detection method provided by the embodiment of the invention does not need to add new hardware probe equipment or singly send detection messages, reduces the cost, improves the utilization rate of public network bandwidth, generates configuration flow detection rules according to the input network topology information through the management platform, simplifies the configuration flow,
Further, referring to fig. 3, fig. 3 is a flowchart of a method of step 102 of the network path detection method provided in the embodiment of the present invention in fig. 1, where step 102 includes:
in the embodiment of the present application, by extending the IP option field to sn+vni+id, traffic path detection of different tenants can be performed simultaneously, so that the traffic detection of overlay and underlay are coordinated without interference.
Further, step 1022 may include: according to the expanded message, carrying out flow marking on east-west flow and north-south flow, and determining network equipment configured with the flow marking;
the traffic marking points of east-west traffic comprise access points of cloud entering messages and client virtual machine points, and the traffic marking points of north-south traffic comprise special line access ports and virtual interaction software corresponding to a cloud host.
In this embodiment, the traffic marking points of east-west traffic mark the access point and the client virtual machine point of the cloud entering message; the flow mark points of the north-south flow are a bleaf inlet port, a private line access POP inlet port, virtual interaction software corresponding to the cloud host and the like. Because the cloud internal network has the encapsulation of the vxlan, the vxlan encapsulation can be started, the value of the inner layer IP OPTION is copied to the outer layer message header of the vxlan, the difficulty of flow statistics is greatly simplified, and the message forwarding efficiency is improved.
Further, referring to fig. 4, fig. 4 is a flowchart of a method of step 103 of the network path detection method provided in the embodiment of the present invention in fig. 1, where step 103 includes:
It should be noted that, the management platform analyzes the flow forwarding path according to the flow statistics information corresponding to each detection rule obtained periodically, extracts the device and port information through which the corresponding message flows, finds the initial device information, and finally associates the intermediate device information according to the connection relationship between the network device and the port, if not, complements the intermediate device information, and generates the flow path topology map corresponding to each flow detection rule. And carrying out flow statistics aggregation on the cluster or the main and standby forwarding nodes, displaying the number of messages received by each forwarding node, and restoring the flow forwarding condition in the near time according to the historical statistical information.
In some embodiments, after determining the network device configured with the traffic label according to the extended message and performing the traffic path detection on the network device configured with the traffic label in parallel, the method further includes:
recording a message sequence number SN of a message, and determining whether packet loss exists;
under the condition of no packet loss, counting the current processed message according to the sequence number difference value of the current processed message and the last received message, and storing the current processed message as flow statistical information;
if the counted message serial number SN reaches a preset threshold value, the message serial number SN is stored as historical flow statistic information.
It should be noted that, all network devices and virtual forwarding devices on the public cloud resource pool default to start the flow statistics function based on the IP option, when the flow is counted, a mask mode may be adopted to record the counted message sequence number SN for judging whether a packet loss exists, and when the message sequence number SN is 0xffffffff, it indicates that the packet needs to be counted again. In order to solve the problem that the message is discarded after the message sequence number sn=0 xffffffff, the method is used for judging whether the message is a new sequence packet according to the difference value between the sequence numbers SN between the currently processed message and the last received message, so as to avoid the error of flow statistics. If the counted message sequence number SN reaches the preset threshold, the message sequence number SN is stored as historical traffic statistic information, where the preset threshold in this embodiment may be determined according to the SN length in the ipotion field, and will not be described herein.
Further, referring to fig. 5, fig. 5 is a flowchart of a method of step 104 of the network path detection method provided in the embodiment of the present invention in fig. 1, where step 104 includes:
It should be noted that, in step 1041-1045, the management platform matches the alarm rule according to the result of the flow path restoration, determines whether to alarm or recover the alarm according to the matching result, queries the corresponding alarm notification group, and notifies the relevant party.
Specifically, in this embodiment, according to the flow path restoration result, the flow statistics information of the flow path is queried, a preset alarm rule is matched, and an alarm type is determined under the condition that the preset alarm rule is matched, where the alarm type includes generating an alarm and recovering an alarm, if the alarm type is determined to be generating an alarm, an alarm report is triggered to perform a fault alarm, if the alarm type is determined to be recovering an alarm, an alarm report list is queried, and alarm information is sent to perform a fault alarm. When the flow statistical information shows that message data is interrupted or lost, an alarm is generated; and when the flow path detection is successful, reporting a recovery alarm. The management platform matches the alarm rules according to the flow path restoration result, judges whether to carry out alarm or restore alarm according to the matching result, inquires the corresponding alarm notification group and notifies the relevant party, and continuously notifies the relevant party of the deadly alarm until the alarm is restored.
According to the embodiment of the invention, through the flow statistical information of all devices in the whole resource pool network, the actual flow path is analyzed, the network fault is rapidly positioned, the operation and maintenance personnel can visually find the problem through the flow path which is displayed in a patterning way by the management platform, when the flow breaks down, an alarm is triggered, the fault problem is timely determined, and the user experience is improved.
Referring to fig. 8, a schematic structural diagram of a network path detection device according to an embodiment of the present invention is shown, where the device may include:
the network topology information module 201 is configured to search network equipment and port information according to pre-entered network topology information, and send a pre-configured flow detection rule to the network equipment;
the flow path detection module 202 is configured to expand an IP option field of a packet based on the flow detection rule, and perform flow path detection;
the flow path restoration module 203 is configured to obtain information of a network device and a port through which the packet flows, generate a flow path topology map corresponding to the flow detection rule, and determine a flow path restoration result;
and the fault alarm module 204 is configured to match a preset alarm rule to perform fault alarm according to the flow path restoration result.
Further, the network topology information module 201 includes:
the matching information sub-module is used for matching multi-group information according to the network equipment of the network topology information, and determining a source port and a destination port through which the flow flows, wherein the multi-group information comprises a source IP, a destination IP, a source port and a destination port;
the configuration rule submodule is used for configuring the flow detection rule for each tenant in the public cloud according to the source port and the destination port through which the flow flows;
and the sending rule submodule is used for sending the flow detection rule to the network equipment through a network configuration protocol or a network security protocol.
Further, the flow path detection module 202 includes:
a message processing sub-module, configured to add each tenant VIN in the public cloud, an ID of the flow detection rule, and a message sequence number SN in an IP option field of the message;
and the detection path submodule is used for determining the network equipment configured with the flow marks according to the expanded message and carrying out flow path detection on the network equipment configured with the flow marks in parallel.
Further, the detection path submodule includes:
the flow marking unit is used for marking the east-west flow and the north-south flow according to the expanded message and determining network equipment for configuring the flow marking;
The traffic marking points of the northeast traffic comprise access points of cloud entering messages and client virtual machine points, and the traffic marking points of the northeast traffic comprise special line access ports and virtual interaction software corresponding to a cloud host.
Further, the flow path detection module 202 further includes:
a recording message sub-module for recording the message serial number SN of the message and determining whether the packet loss exists;
the first storage sub-module is used for counting the current processed message according to the sequence number difference value of the current processed message and the last received message under the condition of no packet loss and storing the current processed message as flow statistical information;
and the second storage sub-module is used for storing the message sequence number SN as historical flow statistical information if the counted message sequence number SN reaches a preset threshold value.
Further, the flow path restoration module 203 includes:
the determining path submodule is used for determining a message flow path according to the flow statistical information corresponding to each flow detection rule acquired periodically;
the determining information sub-module is used for determining the information of the initial network equipment through which the message flows according to the message flow path;
and the generation sub-module is used for generating a flow path topological graph corresponding to each flow detection rule based on the connection relation between the network equipment and the ports and the intermediate equipment information of the message flow path.
Further, the flow path restoration module 203 includes:
the information acquisition sub-module is used for acquiring flow statistical information of the network equipment and the ports through which the messages flow, wherein the flow statistical information comprises the number of the messages received by the network equipment and the ports;
and the determination result submodule is used for generating message forwarding conditions of network equipment and ports in a preset time period according to the flow statistical information and determining a flow path restoration result.
Further, the fault alert module 204 includes:
the query information sub-module is used for querying flow statistical information of the flow path according to the flow path restoration result;
the matching alarm sub-module is used for matching a preset alarm rule according to the flow statistical information of the flow path;
the alarm determining sub-module is used for determining an alarm type under the condition of matching the preset alarm rule, wherein the alarm type comprises generating an alarm and recovering the alarm;
the first alarm sub-module is used for triggering alarm reporting to perform fault alarm if the alarm type is determined to be the generated alarm;
and the second alarm sub-module is used for inquiring an alarm report list and sending alarm information to carry out fault alarm if the alarm type is determined to be the recovery alarm.
According to the network path detection device provided by the embodiment of the invention, network equipment and port information are searched according to the network topology information which is input in advance, a pre-configured flow detection rule is issued to the network equipment, an IP option field of a message is expanded based on the flow detection rule, flow path detection is performed, the network equipment and port information through which the message flows are obtained, a flow path topological diagram corresponding to the flow detection rule is generated, a flow path restoration result is determined, and fault alarm is performed by matching with a preset alarm rule according to the flow path restoration result. According to the invention, by expanding the IP option field, the flow path detection of different tenants in the public cloud can be simultaneously carried out, the flow path topology information is generated to monitor the tenant service in real time based on the flow detection rules of the multiple groups, and the hardware probe equipment is not required to be newly added, so that the cost is reduced, the alarm is triggered when the flow is interrupted and the fault problem is timely determined, and the user experience is improved.
The embodiment of the present invention also provides a communication device, as shown in fig. 9, including a processor 301, a communication interface 302, a memory 303, and a communication bus 304, where the processor 301, the communication interface 302, and the memory 303 perform communication with each other through the communication bus 304,
A memory 303 for storing a computer program;
the processor 301, when executing the program stored in the memory 303, may implement the following steps:
searching network equipment and port information according to the pre-recorded network topology information, issuing a pre-configured flow detection rule to the network equipment, expanding an IP option field of a message based on the flow detection rule, detecting a flow path, acquiring the network equipment and port information through which the message flows, generating a flow path topology map corresponding to the flow detection rule, determining a flow path restoration result, and matching a preset alarm rule according to the flow path restoration result to carry out fault alarm.
The communication bus mentioned by the above terminal may be a peripheral component interconnect standard (Peripheral Component Interconnect, abbreviated as PCI) bus or an extended industry standard architecture (Extended Industry Standard Architecture, abbreviated as EISA) bus, etc. The communication bus may be classified as an address bus, a data bus, a control bus, or the like. For ease of illustration, the figures are shown with only one bold line, but not with only one bus or one type of bus.
The communication interface is used for communication between the terminal and other devices.
The memory may include random access memory (RandomAccess Memory, RAM) or non-volatile memory (non-volatile memory), such as at least one disk memory. Optionally, the memory may also be at least one memory device located remotely from the aforementioned processor.
The processor may be a general-purpose processor, including a central processing unit (Central Processing Unit, CPU for short), a network processor (Network Processor, NP for short), etc.; but also digital signal processors (Digital Signal Processing, DSP for short), application specific integrated circuits (Application Specific Integrated Circuit, ASIC for short), field-programmable gate arrays (Field-Programmable Gate Array, FPGA for short) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.
In yet another embodiment of the present invention, a computer readable storage medium is provided, in which instructions are stored, which when run on a computer, cause the computer to perform the network path detection method according to any one of the above embodiments.
In yet another embodiment of the present invention, a computer program product containing instructions that, when run on a computer, cause the computer to perform the network path detection method of any of the above embodiments is also provided.
In the above embodiments, it may be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented in software, may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When loaded and executed on a computer, produces a flow or function in accordance with embodiments of the present invention, in whole or in part. The computer may be a general purpose computer, a special purpose computer, a computer network, or other programmable apparatus. The computer instructions may be stored in or transmitted from one computer-readable storage medium to another, for example, by wired (e.g., coaxial cable, optical fiber, digital Subscriber Line (DSL)), or wireless (e.g., infrared, wireless, microwave, etc.). The computer readable storage medium may be any available medium that can be accessed by a computer or a data storage device such as a server, data center, etc. that contains an integration of one or more available media. The usable medium may be a magnetic medium (e.g., floppy Disk, hard Disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., solid State Disk (SSD)), etc.
It is noted that relational terms such as first and second, and the like are used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Moreover, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element.
In this specification, each embodiment is described in a related manner, and identical and similar parts of each embodiment are all referred to each other, and each embodiment mainly describes differences from other embodiments. In particular, for system embodiments, since they are substantially similar to method embodiments, the description is relatively simple, as relevant to see a section of the description of method embodiments.
The foregoing description is only of the preferred embodiments of the present invention and is not intended to limit the scope of the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention are included in the protection scope of the present invention.
Claims (15)
1. A network path probing method, the method comprising:
searching network equipment and port information according to pre-entered network topology information, and issuing a pre-configured flow detection rule to the network equipment;
based on the flow detection rule, expanding an IP option field of the message to detect a flow path;
acquiring network equipment and port information through which the message flows, generating a flow path topological graph corresponding to the flow detection rule, and determining a flow path restoration result;
and according to the flow path restoration result, matching a preset alarm rule to carry out fault alarm.
2. The network path detection method according to claim 1, wherein the searching for network devices and port information according to the pre-entered network topology information and issuing the pre-configured traffic detection rule to the network devices comprises:
according to the network equipment of the network topology information, matching multiple group information, and determining a source port and a destination port through which the flow flows, wherein the multiple group information comprises a source IP, a destination IP, a source port and a destination port;
Configuring the flow detection rule for each tenant in the public cloud according to a source port and a destination port through which the flow flows;
and issuing the flow detection rule to the network equipment through a network configuration protocol or a network security protocol.
3. The network path detection method according to claim 1, wherein the expanding the IP option field of the packet based on the traffic detection rule, performing traffic path detection, includes:
adding each tenant VIN, the ID of the flow detection rule and the message serial number SN in the public cloud in the IP option field of the message;
and determining the network equipment configured with the flow marks according to the expanded message, and detecting the flow paths of the network equipment configured with the flow marks in parallel.
4. The network path detection method according to claim 3, wherein determining the network device configured with the traffic label according to the extended message, and performing the traffic path detection on the network device configured with the traffic label in parallel, includes:
according to the expanded message, carrying out flow marking on east-west flow and north-south flow, and determining network equipment configured with the flow marking;
the traffic marking points of the northeast traffic comprise access points of cloud entering messages and client virtual machine points, and the traffic marking points of the northeast traffic comprise special line access ports and virtual interaction software corresponding to a cloud host.
5. The network path detection method according to claim 4, wherein the determining the network device configured with the traffic label according to the extended message, and after performing the traffic path detection on the network device configured with the traffic label in parallel, further comprises:
recording a message sequence number SN of the message, and determining whether packet loss exists;
under the condition of no packet loss, counting the current processed message according to the sequence number difference value of the current processed message and the last received message, and storing the current processed message as flow statistical information;
and if the counted message serial number SN reaches a preset threshold value, storing the message serial number SN as historical flow statistic information.
6. The network path detection method according to claim 1, wherein the obtaining the network device and port information through which the packet flows, generating a traffic path topology map corresponding to the traffic detection rule, and determining a traffic path restoration result, includes:
determining a message flow path according to flow statistical information corresponding to each flow detection rule obtained periodically;
determining initial network equipment information through which the message flows according to the message flow path;
and based on the connection relation between the network equipment and the ports, associating the intermediate equipment information of the message flow paths, and generating a flow path topological graph corresponding to each flow detection rule.
7. The network path detection method according to claim 6, wherein the obtaining the network device and port information through which the packet flows, generating a traffic path topology map corresponding to the traffic detection rule, and determining a traffic path restoration result, includes:
acquiring flow statistical information of network equipment and ports through which the messages flow, wherein the flow statistical information comprises the number of messages received by the network equipment and the ports;
and generating message forwarding conditions of network equipment and ports in a preset time period according to the flow statistical information, and determining a flow path restoration result.
8. The network path detection method according to claim 1, wherein the performing fault alerting by matching with a preset alerting rule according to the flow path restoration result includes:
inquiring flow statistical information of the flow path according to the flow path restoration result;
according to the flow statistical information of the flow path, matching a preset alarm rule;
under the condition of matching the preset alarm rule, determining an alarm type, wherein the alarm type comprises generating an alarm and recovering the alarm;
if the alarm type is determined to be the generated alarm, triggering alarm reporting to perform fault alarm;
And if the alarm type is determined to be the recovery alarm, inquiring an alarm report list, and sending alarm information to perform fault alarm.
9. A network path detection apparatus, the apparatus comprising:
the network topology information module is used for searching network equipment and port information according to the pre-recorded network topology information and transmitting a pre-configured flow detection rule to the network equipment;
the flow path detection module is used for expanding the IP option field of the message based on the flow detection rule and carrying out flow path detection;
the flow path restoration module is used for acquiring the network equipment and port information through which the message flows, generating a flow path topological graph corresponding to the flow detection rule, and determining a flow path restoration result;
and the fault alarm module is used for carrying out fault alarm by matching with a preset alarm rule according to the flow path restoration result.
10. The network path detection apparatus according to claim 9, wherein the network topology information module includes:
the matching information sub-module is used for matching multi-group information according to the network equipment of the network topology information, and determining a source port and a destination port through which the flow flows, wherein the multi-group information comprises a source IP, a destination IP, a source port and a destination port;
The configuration rule submodule is used for configuring the flow detection rule for each tenant in the public cloud according to the source port and the destination port through which the flow flows;
and the sending rule submodule is used for sending the flow detection rule to the network equipment through a network configuration protocol or a network security protocol.
11. The network path detection apparatus of claim 9, wherein the traffic path detection module comprises:
a message processing sub-module, configured to add each tenant VIN in the public cloud, an ID of the flow detection rule, and a message sequence number SN in an IP option field of the message;
and the detection path submodule is used for determining the network equipment configured with the flow marks according to the expanded message and carrying out flow path detection on the network equipment configured with the flow marks in parallel.
12. The network path probing apparatus of claim 11, wherein the probing path submodule comprises:
the flow marking unit is used for marking the east-west flow and the north-south flow according to the expanded message and determining network equipment for configuring the flow marking;
the traffic marking points of the northeast traffic comprise access points of cloud entering messages and client virtual machine points, and the traffic marking points of the northeast traffic comprise special line access ports and virtual interaction software corresponding to a cloud host.
13. The network path detection apparatus of claim 9, wherein the traffic path detection module further comprises:
a recording message sub-module for recording the message serial number SN of the message and determining whether the packet loss exists;
the first storage sub-module is used for counting the current processed message according to the sequence number difference value of the current processed message and the last received message under the condition of no packet loss and storing the current processed message as flow statistical information;
and the second storage sub-module is used for storing the message sequence number SN as historical flow statistical information if the counted message sequence number SN reaches a preset threshold value.
14. A communication device, comprising: a transceiver, a memory, a processor, and a program stored on the memory and executable on the processor;
the processor being configured to read a program in a memory to implement the steps of the network path detection method according to any one of claims 1-8.
15. A readable storage medium storing a program, wherein the program when executed by a processor implements the steps of the network path detection method according to any one of claims 1-8.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211712266.XA CN116248479A (en) | 2022-12-29 | 2022-12-29 | Network path detection method, device, equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211712266.XA CN116248479A (en) | 2022-12-29 | 2022-12-29 | Network path detection method, device, equipment and storage medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN116248479A true CN116248479A (en) | 2023-06-09 |
Family
ID=86626859
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202211712266.XA Pending CN116248479A (en) | 2022-12-29 | 2022-12-29 | Network path detection method, device, equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN116248479A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN116455680A (en) * | 2023-06-19 | 2023-07-18 | 卓望数码技术（深圳）有限公司 | TCP full-flow collection and aggregation method and system for cloud platform and computer equipment |
-
2022
- 2022-12-29 CN CN202211712266.XA patent/CN116248479A/en active Pending
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN116455680A (en) * | 2023-06-19 | 2023-07-18 | 卓望数码技术（深圳）有限公司 | TCP full-flow collection and aggregation method and system for cloud platform and computer equipment |
| CN116455680B (en) * | 2023-06-19 | 2023-10-13 | 卓望数码技术（深圳）有限公司 | TCP full-flow collection and aggregation method and system for cloud platform and computer equipment |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| JP7108674B2 (en) | Failure root cause determination method and device, and computer storage medium | |
| US8583779B2 (en) | Root cause analysis approach with candidate elimination using network virtualization | |
| EP1999890B1 (en) | Automated network congestion and trouble locator and corrector | |
| US20160359695A1 (en) | Network behavior data collection and analytics for anomaly detection | |
| CN112787841B (en) | Fault root cause positioning method and device and computer storage medium | |
| WO2022083540A1 (en) | Method, apparatus, and system for determining fault recovery plan, and computer storage medium | |
| US8274911B2 (en) | Network monitoring system and path extracting method | |
| WO2021018309A1 (en) | Method, device and system for determination of message transmission path, and computer storage medium | |
| US11509552B2 (en) | Application aware device monitoring correlation and visualization | |
| EP3222004B1 (en) | Diagnostic testing in networks | |
| WO2021169290A1 (en) | Method for configuring performance test indication information, and related device | |
| CN111030873A (en) | Fault diagnosis method and device | |
| JP2005285040A (en) | Network monitoring system, method and program | |
| CN111147371B (en) | Method for processing routing event record table item, network equipment and control equipment | |
| US20130042020A1 (en) | Quick Network Path Discovery | |
| CN114915561B (en) | Network topology graph generation method and device | |
| US11032124B1 (en) | Application aware device monitoring | |
| CN116248479A (en) | Network path detection method, device, equipment and storage medium | |
| CN110071843B (en) | Fault positioning method and device based on flow path analysis | |
| KR100964392B1 (en) | System and method for managing network failure | |
| WO2019001101A1 (en) | Routing path analysis method and device | |
| JP2019145893A (en) | Topology determination device, topology determination method, topology determination program, and communication system | |
| US11438237B1 (en) | Systems and methods for determining physical links between network devices | |
| JP2004086522A (en) | Communication network monitoring system | |
| US10756951B2 (en) | Network incident identification based on characterizing relationships between interfaces and events as graphical component relationships |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB02 | Change of applicant information | ||
| CB02 | Change of applicant information |
Address after: 100007 room 205-32, floor 2, building 2, No. 1 and No. 3, qinglonghutong a, Dongcheng District, Beijing Applicant after: Tianyiyun Technology Co.,Ltd. Address before: 100093 Floor 4, Block E, Xishan Yingfu Business Center, Haidian District, Beijing Applicant before: Tianyiyun Technology Co.,Ltd. |